Rejetto HTTP File Server - Template injection

This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. id: CVE-2024-23692 info: name: Rejetto HTTP File Server - Template injection author: johnk3r severity: critical description: | This...

xss-payload-list

xss-payload-list 🎯 Cross Site Scripting XSS Vulnerability Payload List...

Android-Security-Masterclass

Android Security Masterclass 🛡️📱 Official OWASP Project — A Hands-on OWASP MASVS/MASTG Security Training Lab for Android Developers & Pentesters — Mirror Architecture: Vulnerable ↔ Secure ↔ Attacker 📖 Overview The Android Security Masterclass is an official OWASP project designed with a Mirror...

CLSA-2026-1792115498 TuxCare security update for nodemailer (3 CVEs)

TuxCare rebuilt nodemailer to address 3 CVEs. Fixed in 9.0.0-tuxcare.3...

OWASP-Top-10-Neocloud-and-AI-Data-Center-Security-Risks

The Top 10 Neocloud and AI Data Center Security Risks FORGE - Harden the metal beneath the model. 🌐 Website: https://forge-framework.io Executive Summary AI workloads depend on complex infrastructure spanning accelerators, high-speed networks, storage, orchestration platforms, identity systems,...

CLSA-2026-1792114646 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 24 org.springframework packages to address 1 CVE. Fixed in 5.3.30-tuxcare.12...

Audix

| / /| | / / / / / |// / // // // / / // |,/ ,/ // //|| is a PowerShell tool to quickly configure the Windows Event Audit Policies for monitoring & incident response. Please note: This tool will only change the local security policy. If applied to a host with a GPO setting, it is best to use the...

bleach

====== Bleach NOTE: 2026-06-05: Bleach is no longer maintained. There will be no future releases including for security issues. See issue: Bleach is an allowed-list-based HTML sanitizing library that escapes or strips markup and attributes. Bleach can also linkify text safely, applying filters th...

UBUNTU-CVE-2026-18662

In Eclipse Jetty, across various versions of jetty-security, and jetty-eeN-security, two or more security constraints with the same http-method-omission set, and no url-patterns, are not combined properly per Jakarta Servlet Spec. Resulting in later http-method-omission sets overriding previous...

PT-2026-116000

IBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions due to a missing initialization vector in the cryptographic algorithm...

Linux Distros Unpatched Vulnerability : CVE-2026-96957

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-96957 Note that...

MiracleLinux 9 : kernel-5.14.0-687.48.1.el9_8 (AXSA:2026-2071:101)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2071:101 advisory. kernel: vhost: move vdpa group bound check to vhostvdpa CVE-2026-43248 kernel: security/keys: fix missed RCU read section on lookup CVE-2026-64015...

python313-urllib3-2.8.0-1.1 on GA media (moderate)

python313-urllib3-2.8.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:12044-1 Rating: moderate Cross-References: CVE-2016-9015 CVE-2018-20060 CVE-2019-11324 CVE-2019-9740 CVE-2020-26137 CVE-2021-33503 CVE-2023-43804 CVE-2023-45803 CVE-2024-37891 CVE-2026-97687 CVE-2026-97688 CVE-2026-97689 CV...

PT-2026-116137

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication...

Linux Distros Unpatched Vulnerability : CVE-2026-18659

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Eclipse Jetty, across various versions of jetty-security, and jetty-eeN-security, and jetty-eeN- servlet, the Jakarta Spec constraints defined as...

Microsoft PowerShell 7.4.x < 7.4.21 / 7.5.x < 7.5.12 / 7.6.x < 7.6.7 Multiple Vulnerabilities (October 2026)

The version of Microsoft PowerShell installed on the remote host is 7.4.x prior to 7.4.21, 7.5.x prior to 7.5.12, or 7.6.x prior to 7.6.7. It is, therefore, affected by multiple vulnerabilities: - Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized...

UBUNTU-CVE-2026-18659

In Eclipse Jetty, across various versions of jetty-security, and jetty-eeN-security, and jetty-eeN-servlet, the Jakarta Spec constraints defined as http-method-omission can be bypassed by using substrings of the defined HTTP Methods...

PT-2026-116138

IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass security restrictions due to improper enforcement of the ChrootDirectory configuration directive...

Linux Distros Unpatched Vulnerability : CVE-2026-70188

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over...

connectwise-automate-AiTM-rce

ConnectWise Automate Adversary-in-the-Middle Remote Code Execution Table of Contents Background Timeline Thoughts and Learnings Responsible Disclosure PoC Code Report Provided to ConnectWise Summary Vulnerable Configuration Impact Technical Details 1. HTTP Transport 2. Insufficient Protocol...